Privacy Policy

This Policy is based on a repository audit. It distinguishes verified local Tool processing from personal data that may be handled when a browser requests the Website or a person contacts the Company.

Last updated: 26 July 2026Version: 1.0

1. Who controls personal data

The data controller is the legally identified Website operator, referred to in general prose as the Company.

2. Controller identity and contact details

GDPR transparency normally requires the controller's identity and contact details. The defined term “Company” is not a substitute.

Operator and legal identity

“Company” means GOLDWAVE DYNAMICS LIMITED, the legal entity identified here as the Website operator.

Public operator name: GOLDWAVE DYNAMICS LIMITED
Legal name: GOLDWAVE DYNAMICS LIMITED
Official company website: https://goldwavedynamicslimited.com/
CRO registration number: 822127
Legal form: Private Company Limited by Shares (LTD)
Place of registration: Dublin, Ireland
Date incorporated: 24 July 2026
Operator type: company
Country of establishment: Ireland
Geographic address: Venture Hub, 136 Capel Street, Dublin 1, D01 T2C9, Ireland
General contact: admin@goldwavedynamicslimited.com

Implementation note:GDPR transparency normally requires the controller's identity and contact details. Irish rules for online information-society services may also require the provider's name, geographic address and direct electronic contact details. “Company” alone may be insufficient. A lawful correspondence or service address may be considered instead of a private residential address, but professional advice is required before relying on that approach.

3. Scope

This Policy covers the Website. External websites, advertisers, affiliates and other third parties publish their own notices.

4. Summary of current practices

Tool inputs remain in browser state and are not submitted to a calculation backend. Optional Google Analytics loads only after an affirmative analytics choice. Google AdSense and disclosed affiliate links are configured separately, and hosting request data may still be processed.

5. Categories of data processed

Potential personal data includes network request information, correspondence, consent choices and, only after consent, limited website-usage information. Tool inputs, PDF contents and text entered into Tools are excluded from Analytics.

6. Data supplied directly

There is no contact form or registration. If you send a message through a configured email channel, its content and contact details are supplied by you.

7. Technical and usage data

Firebase Hosting and Google's delivery infrastructure may receive IP address, request time, requested URL and browser or device request information when serving the Website. Provider logging and retention settings remain subject to owner verification.

8. Contact and support correspondence

Once configured, correspondence will be used to understand and respond to the request. Retention and email-provider facts require owner review.

10. Advertising-related data

Google AdSense advertising is enabled subject to the configured consent choices and provider controls.

11. Affiliate-link data

Clearly labelled Nord Security affiliate links appear only on relevant pages. If a visitor follows one, the destination service may receive referral and attribution information under its own privacy notice.

12. Purposes

Purposes include delivering pages, maintaining reliability, diagnosing faults, protecting the Website and, after consent, understanding aggregate Website use. Conditional purposes appear in the processing table.

13. Lawful bases

The proposed basis for necessary delivery and proportionate security is legitimate interests, subject to a documented owner assessment. Consent must be used where required for optional storage, analytics or advertising.

14. Processing activities

This table comes from the centralized registry. Entries marked for owner review are not represented as verified production facts.

Activity	Data and purpose	Basis and recipients	Retention and status
Website delivery and security	IP address, request time, browser and device request information, requested URL. Deliver the Website, maintain reliability, diagnose faults and protect it from abuse.	Legitimate interests, subject to an owner assessment of necessity and impact. Google Ireland Limited and relevant Google hosting, CDN and security service providers	Server-log retention period — owner verification required. Enabled or applicable; owner review required.
Contact and rights correspondence	Contact details, message content, information voluntarily included by the sender. Respond to support, privacy, copyright, accessibility, security or commercial enquiries.	Steps requested by the sender, legal obligations, or legitimate interests depending on the message. Configured email provider — owner verification required	Contact-message retention criteria — owner verification required. Enabled or applicable; owner review required.
Advertising delivery and measurement	Advertising identifiers and related usage data as defined by the selected provider and consent configuration. Fund the free Website through advertising where enabled.	Consent where required; owner and professional review required before activation. Google Ireland Limited and its advertising service providers	Google advertising retention and consent settings; owner periodic verification required. Enabled or applicable; owner review required.
Contextual affiliate referrals	Destination URL and affiliate identifiers contained in the clicked link, Request information received by the merchant after navigation. Attribute qualifying referrals and help fund free Website access.	Presenting the optional contextual link is based on legitimate interests; the merchant determines the basis for its attribution technologies under its own notice. Nord Security affiliate programme and destination service	HandyGrid does not store an affiliate click record; merchant retention is governed by the destination service. Enabled or applicable; owner review required.
Consent-based audience analytics	Page path and page title, Referrer and acquisition channel, Browser, device and coarse location information, Page-view, scroll and outbound-link interaction events. Understand aggregate Website use, improve navigation and identify useful Tool categories without collecting Tool inputs.	Consent. Google Ireland Limited and its contracted service providers	Google Analytics property retention setting and aggregate-report rules — owner verification required. Enabled or applicable; owner review required.

16. Google Analytics

Google Analytics 4 measures page views, scrolling and outbound-link interactions only after the visitor selects Allow analytics. The integration sends pathname-only page locations and disables Google Signals and advertising-personalisation signals. It does not send calculator values, document contents, filenames, secret prompts or text entered into Tools. Google explains its processing at policies.google.com/technologies/partner-sites.

17. Hosting, CDN and security providers

Firebase Hosting delivers the exported static Website through Google infrastructure. CDN and request-log locations, recipients and retention remain subject to the provider configuration and owner verification.

18. International transfers

Google services may process data outside the EEA. Applicable processing terms, adequacy decisions and contractual safeguards are used as described by Google; the owner must keep this assessment under review.

19. Retention

Tool inputs are transient browser state. The analytics consent choice remains until changed or cleared. Google Analytics cookies and event data follow the durations shown in the Cookie Policy and the property retention setting. Hosting logs and correspondence follow provider and Company retention criteria.

20. Security

Visible measures include no calculator backend and selected response headers. Reasonable technical and organisational measures are used, but no internet service can guarantee complete security.

21. Automated decision-making and profiling

The Website does not make decisions producing legal or similarly significant effects about visitors. Tools respond only to user-selected inputs.

22. Data-subject rights

Depending on circumstances, people may have rights of access, rectification, erasure, restriction, portability and objection, subject to legal exceptions.

23. Withdrawal of consent

Analytics consent may be changed through Privacy Choices. Withdrawing it stops future Analytics loading and removes the standard HandyGrid-domain Analytics cookies where accessible. Advertising choices are managed through Google Privacy & Messaging where applicable.

24. Right to object

A person may object to legitimate-interests processing. The Company must consider the circumstances and any compelling grounds or legal claims.

25. Complaints

People may complain to the Irish Data Protection Commission or another competent authority. The DPC's official website is dataprotection.ie.

26. Children's data

The Website is not directed specifically to children and creates no child profile. Classroom examples do not change that design. Supervising adults should assess suitability.

27. California and other US state privacy notices

California privacy law applies only when its statutory business criteria are met. The Company reviews those thresholds and other applicable US state laws as the Website grows; this section does not claim a legal determination that a particular law applies.

During the preceding 12 months, the categories potentially processed have been identifiers such as IP address; internet or electronic-network activity such as requested pages, page views and interactions; browser, device and coarse-location information; consent choices; and correspondence voluntarily sent to the Company. Sources, purposes and recipient categories are described in this Policy and the processing table. HandyGrid does not collect Tool inputs or document contents through Analytics and does not sell lists of Tool inputs or contact details for money.

Where applicable, residents may have rights to know or access, delete, correct, opt out of sale, sharing or targeted advertising, limit certain use of sensitive personal information, and receive non-discriminatory treatment. Use Privacy Choices or the contact channel below. Applicable advertising opt-outs are presented through Google's US state regulations message. A recognised Global Privacy Control signal defaults optional HandyGrid Analytics to declined; Google advertising choices remain governed by the published Google message and provider controls.

28. External websites

Third-party sites control their data practices. Review their privacy information before providing data or following an advertisement or affiliate link.

The AI Launcher keeps prompt text in browser memory and opens ordinary links to official external services. HandyGrid does not transmit the prompt. If a visitor copies and later pastes it into a provider, that provider's privacy terms and processing practices apply.

29. Policy changes

The review date and version change only when the Policy meaningfully changes. Material changes may also be highlighted where appropriate.

29. Privacy contact

A working privacy contact must be configured before publication. Do not send unnecessary sensitive information in an initial request.

General support: admin@goldwavedynamicslimited.com
Privacy and data rights: admin@goldwavedynamicslimited.com
Copyright complaints: admin@goldwavedynamicslimited.com
Accessibility feedback: admin@goldwavedynamicslimited.com
Security reports: admin@goldwavedynamicslimited.com
Advertising and affiliate enquiries: admin@goldwavedynamicslimited.com